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KIMS: 

Please substitute the following claims for the pending claims 
wilh the same number: 

12 (currently amended) A method for limiting the operational life of software in 
2 a r etwork environment, the method comprising: 

providing a program applet [[embedded]] with [[an associated]] a 
password ^h^ ^eri therewith™ to a client computer via a network; 

receiving from said program applet via said network a request for 
information stored in a restricted access storage area of a server computer; 

[[further]] automatically receiving from said program applet said 
[associated] embedded password withou t manual entry of the password by a user, 
9 for authentication; 

, 0 authenticating said ((associated]] embedded password bjLthe 

se rver computer and not bv the program applet: 

thereafter providing said information to said program applet via 
said network while said [[associated]] embedded password is valid; and 

invalidating said embedded password coincident with an 
15 invalidation event. 
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, 13. (currently amended) A method according to claim 12 wherein said 

2 invalidating comprises invalidating said [[associated]] embedded password at a 

3 p-edeterminedtime. 

, 14. (currently amended) A metiiod according to claim 12 wherein said 

2 invalidating comprises invalidating said ([associated]] embedded password after 

3 l apse of a predetermined [[elapsed]] time from when said request was received. 

15. (currently amended) A method according to claim 12 wherein said 
Livalidating comprises invalidating said [[associated]] embedded password upon 
trie detection of a loss of communication with said client. 

1 6. (canceled) 
„7. (canceled) 
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1 8 (currently amended) A method according to claim 12 wherein said providing 
comprises generating said [[associated]] embedded password [[at a server upon 
receiving said request at said server)]. 



27 (currently amended) A network-based software authentication system 
comprising a server computer , the server computer comprising: 

a password generator; 

password validation apparatus; 

a restricted-access storage area; 

a program applet; and 

invalidation apparatus; 

wherein said server is operative to: 

a) cause said password generator to generate a password; 

b) embed said password within said program applet, and provide 
sa d program applet [[embedded]] with said password embedd ed , therewithin to a 

client via a network; . « - 

c) receive a request for information and automatically, receive 
said embedded password, from said program applet via said netwo rk, for 
authentication, without manual entry of the^ass^rd^jjsertC, from said 

program applet via said network]]; 

d) authenticate said embedded password using said password 

Jiil ilii in ipnnntm nr A K V gaif< p™?ram applet: 

e) provide said information to said program applet via said 
network while said [[associated]] embedded password is valid; and 

f) invalidate said embedded password using said invalidation 
apparatus coincident with an invalidation event. 

2.1. (original) A system according to claim 27 wherein said invalidation event 
comprises the arrival of a predetermined time. 

09 (currently amended) A system according to claim 27 wherein said 
invalidation event comprises the [[elapsing]] lapsing of a predetermined 
[| elapsed]] time from when said request was received. 

30. (original) A system according to claim 27 wherein said invalidation event 
comprises the detection of a loss of communication with said client. 
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31, (canceled) 

32. (canceled) 

33 ( „ri« A^ema^dto^Cim^wherem said password isgen^ed 



